Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.mft
File:                     _10TK8Zqqiu89lw-X-iaDDcdizo.mft (raw, json)
Hash identifier:          ckYrJ64lpS2Uv6eALyQO4CYcC6LVj4pULonu1gDydMM=
Subject key identifier:   31:EA:A5:C4:1E:1D:4C:37:1D:8F:87:5D:82:47:0C:51:EA:F6:7C:88
Authority key identifier: FF:5D:13:2B:C6:6A:AA:2B:BC:F6:5C:3E:5F:E8:9A:0C:37:1D:8B:3A
Certificate issuer:       /CN=A91C1FA7/serialNumber=FF5D132BC66AAA2BBCF65C3E5FE89A0C371D8B3A
Certificate serial:       02E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_10TK8Zqqiu89lw-X-iaDDcdizo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.mft
Manifest number:          02D9
Signing time:             Mon 21 Sep 2026 01:06:37 +0000
Manifest this update:     Mon 21 Sep 2026 01:06:36 +0000
Manifest next update:     Mon 28 Sep 2026 01:06:36 +0000
Files and hashes:         1: _10TK8Zqqiu89lw-X-iaDDcdizo.crl (hash: TGsIQIGFFB0lLPgkJIDOTntJhDX5ePA1d6ryyN+9cQ8=)
                          2: 064042F259F511EDB22E3F2BC4F9AE02.roa (hash: 0SaUic0cFmBX4GJg5caQlZtmFukZYlTwm6y1EfuxlnQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.crl
                          rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_10TK8Zqqiu89lw-X-iaDDcdizo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 01:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 737 (0x2e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1FA7, serialNumber=FF5D132BC66AAA2BBCF65C3E5FE89A0C371D8B3A
        Validity
            Not Before: Sep 21 01:06:36 2026 GMT
            Not After : Sep 28 01:06:36 2026 GMT
        Subject: CN=6ab0831c-be9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5f:77:12:60:44:33:8f:bc:b1:14:9a:31:6b:
                    fc:ed:8a:57:9f:90:75:67:3b:e4:b2:5b:0b:e7:d6:
                    45:9b:48:8f:6c:6c:c9:6e:04:37:35:c6:06:d3:39:
                    03:ab:08:8c:06:85:bf:48:6b:11:e9:19:d2:10:5a:
                    36:2f:3f:ae:bf:b3:9b:50:58:fa:b2:91:f5:33:9d:
                    f2:0b:43:9b:1a:95:75:6b:97:39:f0:0d:af:98:a1:
                    08:20:25:ab:e1:11:6f:56:77:98:96:bb:8c:df:7c:
                    a2:5a:b2:e7:36:5c:96:29:69:86:1e:24:7c:1c:25:
                    ce:3d:be:59:6a:eb:71:9b:f9:52:c7:01:84:54:20:
                    ec:db:27:56:99:80:6c:b4:21:a0:78:d6:cc:ab:79:
                    b4:2d:53:0f:0b:21:d9:e5:eb:80:4e:ab:a1:38:c6:
                    4a:b7:f8:c4:f4:00:12:15:06:1a:4a:0a:30:b8:97:
                    5f:23:13:71:e6:58:cb:f1:9a:eb:47:29:b0:49:cf:
                    a9:4c:09:50:b3:99:6b:18:3b:6f:b0:bf:83:77:37:
                    bb:5f:9b:f0:66:97:34:20:2a:a8:e5:20:4b:da:73:
                    8e:04:64:68:db:1a:55:7c:d8:49:43:3e:4a:f2:f6:
                    61:53:ba:6e:bb:cd:6e:e8:aa:f4:e0:b5:13:3c:87:
                    49:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:EA:A5:C4:1E:1D:4C:37:1D:8F:87:5D:82:47:0C:51:EA:F6:7C:88
            X509v3 Authority Key Identifier:
                keyid:FF:5D:13:2B:C6:6A:AA:2B:BC:F6:5C:3E:5F:E8:9A:0C:37:1D:8B:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_10TK8Zqqiu89lw-X-iaDDcdizo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:13:eb:3a:a2:16:e3:30:a6:06:eb:6c:61:e5:2c:9c:2c:1e:
         11:d2:e1:94:51:53:05:59:d2:9d:23:32:d6:c8:56:70:e6:0d:
         61:dd:55:6b:92:22:f5:1d:e6:80:3a:47:ce:14:db:7f:2e:0e:
         30:65:2d:e0:52:7d:14:cc:08:92:59:fb:08:00:00:50:54:5c:
         dd:5a:26:6a:cd:4b:63:52:ae:87:67:03:dd:b8:f7:00:a9:de:
         17:42:b0:34:1c:3b:2d:50:be:c2:ed:19:85:a6:b4:98:3b:1d:
         44:50:16:9a:d7:36:61:0a:4e:38:64:21:0b:07:c0:97:b3:8b:
         ec:3a:87:63:82:0b:3f:cb:71:cf:50:cb:74:bc:cf:01:db:22:
         c9:00:e2:37:73:91:6c:04:b5:84:29:00:0b:bd:16:c7:ce:9e:
         5b:d7:94:4d:66:ec:18:0d:3c:ff:2b:e9:71:0f:55:90:2a:38:
         aa:ea:3d:87:51:93:59:ff:9c:d8:70:e3:df:25:87:b4:ac:15:
         aa:f8:89:b0:e3:18:7f:64:d6:43:0e:31:a5:34:7e:25:35:bf:
         de:38:98:8f:aa:43:c2:e8:91:95:49:a7:14:2a:98:25:3e:cb:
         cc:49:2f:dc:d5:30:46:13:5a:1c:98:90:a0:9b:df:d6:38:31:
         89:87:e7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:28:46 2026 by rpki-client